How to stop a hacker at Facebook?

[dashing.sujay]

I said Javascript, not Java. Don't tell me you don't know the difference.

I know, still I believe FB is not vulnerable to JS attacks. But orkut was, very much.

 

[mohityadavx]

I think I know the solution its like this go to forgot your password then there enter username then next step don't have access to primary password then give new email select three friend whom you would like to acknowledge the fact that new email is yours and your password should be reset.

Now the person hacking the account may have three account which are friend in your friend's account, So its that simple. (Experimented on friend's account )

 

[coolpcguy]

1) Can you tell me how to do that in FB, I can't find an option.

2) Same as above.

3) That link was just listing of devices recognised and you can make them unrecognised if you require, not blocked. (given there is an option).

1 & 2 -> *www.facebook.com/help/?faq=148233965247823#What-is-Login-Approvals?-How-do-I-turn-this-setting-on?

3 -> Making them as unrecognized effectively blocks them from your account.

I suspect that it could be some javascript vulnerability. What can be done in this case?

The only this is possible is a direct link to the image. Nothing to be done if there's a direct link to the image coming from the CDN.

I know, still I believe FB is not vulnerable to JS attacks. But orkut was, very much.

There have been plenty of js-based attacks on fb in the past. Most of the exploits are fixed before they are disclosed to the public, so you don't hear about them.

 

[dashing.sujay]

There's no "Login Approval" thingy in my settings as described in the link above.

 

[coolpcguy]

That's weird. Have you added your mobile number?

 

[dashing.sujay]

Yes, notifications are enabled and I get them too. Though text messaging is disabled.

 

[coolpcguy]

Not really sure why it's so. perhaps it's disabled for short while?

 

[dashing.sujay]

May be. You can see how its currently.

 

[Faun]

Unplug the cable to internet. It's the only solution.

Spoiler

Trust me. I am an internet expert.

 

[Nipun]

There can be a keylogger on your PC too. Try changing password from a different PC(or a mobile), and dont login from the current computer for sometime and check.

 

[mrintech]

There's a Keylogger on your PC. Scan with Kaspersky and Super Anti-Spyware

Hope everything gets fine soon

 

[Nipun]

There's a Keylogger on your PC. Scan with Kaspersky and Super Anti-Spyware

Hope everything gets fine soon

Kaspersky can't detect most keyloggers. Not the one I use atleast.

 

[101gamzer]

Try these DCWG | DNS Changer Working Group

 

[Sujeet]

Stop Using Facebook.Its Useless.Have Peace of Mind.

 

[mrintech]

Stop Using Facebook.Its Useless.Have Peace of Mind.

 

[balakrish]

Re: How to stop a hacker at Facebook? - You CANT secure your facebook

Okay. After all these discussion im gonna tell mine. Please drop your comments since its my first LOOOOOONG post in thinkdigit forums
yes. Hacking a facebook account is really easy and i dont know how many of you know this "vulnerability" of facebook.
AS I KNOW, the hacker who hacked his friend's a/c should have known the ans of fb security qn. then PROBLEM SOLVED.

Lemme demonstrate How easy to hack a fb a/c when you know the security qn ans.

So I'm gonna provide some snapshots here.

1.Clicking "Forgot Password"
*s14.postimage.org/6ermnmobl/Screenshot_from_2012_05_22_23_40_21.png
2.Entering the email id or username(pretty easy)
*s18.postimage.org/8waotahbt/Screenshot_from_2012_05_22_23_41_38.png
3.Clicking "NO longer have access to these"
*s17.postimage.org/68jg0zs67/Screenshot_from_2012_05_22_23_42_27.png
4.Entering hacker's mail id
*s17.postimage.org/5x1zo8bq7/Screenshot_from_2012_05_22_23_43_01.png
5.Entering the ans for security qn. [this is what the hacker has to hack ]
*s17.postimage.org/ipq3o5nbz/Screenshot_from_2012_05_22_23_43_27.png

Finally hacked

Anyways you may ask me, hey Bullsh*t! cant he change his fb security qn?
Oh! my answer is, "if you can change the security qn. please tell me how to do it"

AS I KNOW, facebook offers the user to change his mail id, but not his security qn. (atleast for me) Lemme show my account's security tab.

*s15.postimage.org/7r1ik4qy3/Screenshot_from_2012_05_23_00_03_26.png

P.S: i dont know how long these images will be visible. because i uploaded them in postimage.org. i dont know their TOS
Images are taken by gnome-screenshot and edited by using GIMP.

 

[Nipun]

*i.imgur.com/y0YV9.jpg

Also, letting someone know answer to security question is as stupid as giving them password.

 

[balakrish]

*i.imgur.com/y0YV9.jpg

Also, letting someone know answer to security question is as stupid as giving them password.

Hey! Is this a first time you set security qn for your a/c? because i cant find the option to change security qn. But when you set it first,you will have an option to set security qn.After setting security qn,this option goes away(atleast for me)

 

[dashing.sujay]

It is true. You can't change security question once set; FB help also says that.

 

[Nipun]

It is true. You can't change security question once set; FB help also says that.

I don't have a security question.. I think I had set it.
Whatever, if I dont have it, I am safe